CVE-2006-3659
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object.
Date published : 2006-07-17
http://www.securityfocus.com/bid/19013
http://browserfun.blogspot.com/2006/07/mobb-16-mhtmlfile-location.html